CGRC practice questions 21–27

1. Question 21 · 27 in bank

   Mark is the project manager of the BFL project for his organization. He and the project team are creating a probability and impact matrix using RAG rating. There is some confusion and disagreement among the project team as to how a certain risk is important and priority for attention should be managed. Where can Mark determine the priority of a risk given its probability and impact?

   • ARisk response plan
   • BProject sponsor
   • CRisk management plan
   • DLook-up table

   Show answer

   Answer: D

   Next question

2. Question 22 · 27 in bank

   You work as a project manager for BlueWell Inc. You are about to complete the quantitative risk analysis process for your project. You can use three available tools and techniques to complete this process. Which one of the following is NOT a tool or technique that is appropriate for the quantitative risk analysis process?

   • AQuantitative risk analysis and modeling techniques
   • BData gathering and representation techniques
   • CExpert judgment
   • DOrganizational process assets

   Show answer

   Answer: D

   Next question

3. Question 23 · 27 in bank

   FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that the procedures and controls have been implemented?

   • ALevel 2
   • BLevel 5
   • CLevel 4
   • DLevel 1
   • ELevel 3

   Show answer

   Answer: E

   Next question

4. Question 24 · 27 in bank

   Your organization has named you the project manager of the JKN Project. This project has a BAC of $1,500,000 and it is expected to last 18 months. Management has agreed that if the schedule baseline has a variance of more than five percent then you will need to crash the project. What happens when the project manager crashes a project?

   • AProject costs will increase.
   • BThe amount of hours a resource can be used will diminish.
   • CThe project will take longer to complete, but risks will diminish.
   • DProject risks will increase.

   Show answer

   Answer: A

   Next question

5. Question 25 · 27 in bank

   Select 3

   In 2003, NIST developed a new Certification & Accreditation (C&A) guideline known as FIPS 199. What levels of potential impact are defined by FIPS 199? Each correct answer represents a complete solution. Choose all that apply.

   • AMedium
   • BHigh
   • CLow
   • DModerate

   Show answer

   Answer: ABC

   Next question

6. Question 26 · 27 in bank

   Which of the following NIST publications defines impact?

   • ANIST SP 800-41
   • BNIST SP 800-37
   • CNIST SP 800-30
   • DNIST SP 800-53

   Show answer

   Answer: C

   Next question

7. Question 27 · 27 in bank

   You work as a project manager for BlueWell Inc. There has been a delay in your project work that is adversely affecting the project schedule. You decided, with your stakeholders' approval, to fast track the project work to get the project done faster. When you fast track the project which of the following are likely to increase?

   • ARisks
   • BHuman resource needs
   • CQuality control concerns
   • DCosts

   Show answer

   Answer: A

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CGRC practice, question 21. 27 questions available.